@gneiss/client-auth 1.0.4 → 1.0.5

package/dist/cjs/index.js

@@ -0,0 +1,382 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  AuthGneissCore: () => AuthGneissCore_default,
+  ExpressAuthGneissClient: () => ExpressAuthGneissClient_default,
+  parseCookies: () => parseCookies
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/core/AuthGneissCore.ts
+var import_axios = __toESM(require("axios"), 1);
+var import_dotenv = __toESM(require("dotenv"), 1);
+var import_axios2 = require("axios");
+
+// src/config.ts
+var config = {
+  authUrl: process.env.ENV === "prod" ? "auth.gneiss.io" : process.env.ENV === "staging" ? "auth.gneiss.io/testing" : "localhost:5000"
+};
+
+// src/core/AuthGneissCore.ts
+if (!process.env.ENV) {
+  import_dotenv.default.config();
+}
+var AuthGneissCore = class {
+  constructor(devConfig) {
+    this.config = { ...devConfig, ...config };
+    this.authUrl = this.config.authUrl;
+    this.loginUrl = this.authUrl ? `${this.authUrl}/auth/login` : void 0;
+    this.logoutUrl = this.authUrl ? `${this.authUrl}/auth/logout` : void 0;
+    let errorMsgs = [];
+    if (!process.env.ENV) {
+      errorMsgs.push("ENV is not set in environment variables");
+    }
+    if (errorMsgs.length > 0) {
+      throw new Error(errorMsgs.join("\n"));
+    }
+  }
+  /**
+   * getTokens is a method that exchanges an authentication code for access and refresh tokens.
+   * The client id and secret are passed as basic auth headers to authenticate the client itself.
+   * @param authCode - The authentication code received from the Gneiss authentication service.
+   * @returns A promise that resolves to an object containing the access and refresh tokens.
+   */
+  async getTokens(authCode) {
+    try {
+      const url = `${this.authUrl}/auth/access_token?auth_code=${authCode}`;
+      const encodedClientId = btoa(this.config.clientId);
+      const encodedClientSecret = btoa(this.config.clientSecret);
+      const response = await import_axios.default.post(url, {}, {
+        headers: {
+          "Authorization": `Basic ${encodedClientId}:${encodedClientSecret}`
+        }
+      });
+      return {
+        accessToken: response.data.access_token,
+        refreshToken: response.data.refresh_token,
+        tokenType: response.data.token_type
+      };
+    } catch (error) {
+      throw error;
+    }
+  }
+  /**
+   * refreshToken is a method that refreshes the access token using the refresh token.
+   * @param refreshToken - The refresh token to be used for token refresh.
+   * @returns A promise that resolves to the refreshed access token.
+   */
+  async refreshToken(refreshToken) {
+    try {
+      const url = `${this.authUrl}/auth/refresh`;
+      const response = await import_axios.default.post(url, {}, {
+        headers: {
+          "Authorization": `Bearer ${refreshToken}`
+        }
+      });
+      return response.data.access_token;
+    } catch (error) {
+      return null;
+    }
+  }
+  /**
+   * getUserData is a method that fetches user data using the access token.
+   * @param accessToken - The access token to be used for user data fetching.
+   * @returns A promise that resolves to the user data.
+   */
+  async getUserData(accessToken) {
+    const url = `${this.authUrl}/resource/user_data`;
+    const response = await import_axios.default.get(url, {
+      headers: {
+        "Authorization": `Bearer ${accessToken}`
+      }
+    });
+    if (response.status === 200) {
+      return response.data;
+    }
+    throw new Error("Failed to fetch user data");
+  }
+  /**
+   * validateToken is a method that validates the access token.
+   * @param token - The access token to be validated.
+   * @returns A promise that resolves to a boolean indicating the validity of the token.
+   */
+  async validateToken(token) {
+    try {
+      console.log("DEBUG: token", token);
+      if (!token) {
+        return false;
+      }
+      const url = `${this.authUrl}/auth/validate_token`;
+      const response = await import_axios.default.get(url, {
+        headers: {
+          "Authorization": `Bearer ${token}`
+        }
+      });
+      return response.status === 200;
+    } catch (error) {
+      if (error instanceof import_axios2.AxiosError && error.response?.status === 401) {
+        return false;
+      } else {
+        throw error;
+      }
+    }
+  }
+  /**
+   * getLoginUrl is a method that returns the login URL.
+   * @returns The login URL.
+   */
+  getLoginUrl() {
+    return this.loginUrl;
+  }
+  /**
+   * deleteUser deletes the user
+   * */
+  async deleteUserData(accessToken) {
+    const response = await import_axios.default.post(`${this.authUrl}/resource/delete_user`, {}, {
+      headers: {
+        "Authorization": `Bearer ${accessToken}`
+      }
+    });
+    return response.data;
+  }
+};
+var AuthGneissCore_default = AuthGneissCore;
+
+// src/utils/storage/cookieHandling.ts
+var import_jsonwebtoken = require("jsonwebtoken");
+function setAccessToken(res, accessToken) {
+  const decodedToken = (0, import_jsonwebtoken.decode)(accessToken);
+  if (!decodedToken.exp) {
+    throw new Error("Access token does not contain an expiration time");
+  }
+  res.cookie("accessToken", accessToken, {
+    httpOnly: true,
+    secure: process.env.ENV === "prod" || process.env.ENV === "staging",
+    sameSite: "lax",
+    maxAge: decodedToken.exp * 1e3 - Date.now()
+  });
+}
+function setRefreshToken(res, refreshToken) {
+  const decodedToken = (0, import_jsonwebtoken.decode)(refreshToken);
+  if (!decodedToken.exp) {
+    throw new Error("Refresh token does not contain an expiration time");
+  }
+  res.cookie("refreshToken", refreshToken, {
+    httpOnly: true,
+    secure: process.env.ENV === "prod" || process.env.ENV === "staging",
+    sameSite: "lax",
+    maxAge: decodedToken.exp * 1e3 - Date.now()
+  });
+}
+function parseCookies(req) {
+  const cookies = req.headers.cookie;
+  if (!cookies) {
+    return {};
+  }
+  return cookies.split(";").reduce((acc, cookie) => {
+    const [key, value] = cookie.split("=").map((s) => s.trim());
+    acc[key] = value;
+    return acc;
+  }, {});
+}
+function clearCookies(res) {
+  res.clearCookie("accessToken", {
+    httpOnly: true,
+    secure: process.env.ENV === "prod" || process.env.ENV === "staging",
+    sameSite: "strict",
+    path: "/"
+  });
+  res.clearCookie("refreshToken", {
+    httpOnly: true,
+    secure: process.env.ENV === "prod" || process.env.ENV === "staging",
+    sameSite: "strict",
+    path: "/"
+  });
+}
+
+// src/frameworks/express/middleware/ExpressAuthGneissClient.ts
+var import_axios3 = require("axios");
+var import_axios4 = __toESM(require("axios"), 1);
+var ExpressAuthGneissClient = class extends AuthGneissCore_default {
+  constructor(config2) {
+    super(config2);
+    this.requireAuth = this.requireAuth.bind(this);
+    this.handleCallBack = this.handleCallBack.bind(this);
+    this.login = this.login.bind(this);
+    this.logout = this.logout.bind(this);
+    this.getUser = this.getUser.bind(this);
+    this.deleteUser = this.deleteUser.bind(this);
+  }
+  /**
+   * requireAuth is a middleware function that checks if the access token is valid.
+   * If the access token is not valid, it attempts to refresh the token using the refresh token.
+   * If the refresh token is not valid, it redirects the user to the login page.
+   * @param req - The request object.
+   * @param res - The response object.
+   * @param next - The next middleware function.
+   */
+  async requireAuth(req, res, next) {
+    const cookies = parseCookies(req);
+    console.log("DEBUG: cookies", cookies);
+    try {
+      const isAccessTokenValid = await this.validateToken(cookies?.accessToken);
+      if (!isAccessTokenValid) {
+        const newAccessToken = await this.refreshToken(cookies?.refreshToken);
+        if (newAccessToken) {
+          setAccessToken(res, newAccessToken);
+          res.redirect(req.originalUrl);
+        } else {
+          const returnToUrl = req.originalUrl;
+          res.redirect(`${this.loginUrl}?redirect_url=${this.config.baseClientUrl}${this.config.callbackUrl}&return_to_url=${returnToUrl}`);
+        }
+      } else {
+        next();
+      }
+    } catch (error) {
+      if (error instanceof import_axios3.AxiosError) {
+        res.status(error.response?.status || 500).send(error.response?.data || "Internal server error");
+      } else {
+        res.status(500).send("Internal server error");
+      }
+    }
+  }
+  /**
+   * getUserData is a middleware function that fetches user data using the access token.
+   * @param req - The request object.
+   * @param res - The response object.
+   * @param next - The next middleware function.
+   */
+  async getUser(req, res) {
+    const cookies = parseCookies(req);
+    const accessToken = cookies?.accessToken;
+    if (!accessToken) {
+      throw new Error("No access token found in request cookies");
+    }
+    const userData = await this.getUserData(accessToken);
+    res.status(200).send(userData);
+  }
+  /**
+   * handleCallBack is a middleware function that handles the callback from the authentication service.
+   * It extracts the auth code from the request URL parameters, exchanges it for tokens, and sets the access and refresh tokens in the response cookies.
+   * @param req - The request object.
+   * @param res - The response object.
+   * @param next - The next middleware function.
+   */
+  async handleCallBack(req, res, next) {
+    try {
+      const authCode = req.query.auth_code;
+      const returnToUrl = req.query.return_to_url;
+      if (!authCode) {
+        throw new Error("No auth code found in request url parameters");
+      }
+      const tokens = await this.getTokens(authCode);
+      setAccessToken(res, tokens.accessToken);
+      setRefreshToken(res, tokens.refreshToken);
+      if (returnToUrl) {
+        res.redirect(returnToUrl);
+      } else {
+        res.redirect("/");
+      }
+    } catch (error) {
+      if (error instanceof import_axios3.AxiosError) {
+        res.status(error.response?.status || 500).send(error.response?.data || "Internal server error");
+        console.error("DEBUG: error", error);
+      } else {
+        res.status(500).send("Internal server error");
+        console.error("DEBUG: error", error);
+      }
+    }
+  }
+  /**
+   * login is a function that redirects the user to the Gneiss authentication service for authentication.
+   * @param req - The request object.
+   * @param res - The response object.
+   */
+  login(req, res) {
+    try {
+      if (!this.loginUrl) {
+        throw new Error("Login URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.");
+      }
+      res.redirect(this.loginUrl + `?redirect_url=${this.config.baseClientUrl}${this.config.callbackUrl}`);
+    } catch (error) {
+      console.error("Error in login middleware:", error);
+      res.status(500).send("Internal server error");
+    }
+  }
+  /**
+   * logout is a function that redirects the user to the Gneiss logout service.
+   * @param req - The request object.
+   * @param res - The response object.
+   */
+  logout(req, res) {
+    const cookies = parseCookies(req);
+    try {
+      if (!this.logoutUrl) {
+        throw new Error("Logout URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.");
+      }
+      if (cookies?.accessToken) {
+        import_axios4.default.post(this.logoutUrl, {}, {
+          // Logout
+          headers: {
+            "Authorization": `Bearer ${cookies?.accessToken}`
+          }
+        });
+      }
+      clearCookies(res);
+      res.redirect("/");
+    } catch (error) {
+      console.error("Error in logout middleware:", error);
+      res.status(500).send("Internal server error");
+    }
+  }
+  /**
+   * Utility route handler for deleting a user
+   * This ensures that the user is fully logged out before 
+   * deleting the user's data
+   * 
+   * @param req - The request object.
+   * @param res - The response object.
+   */
+  deleteUser(req, res) {
+    const cookies = parseCookies(req);
+    this.logout(req, res);
+    this.deleteUserData(cookies?.accessToken);
+  }
+};
+var ExpressAuthGneissClient_default = ExpressAuthGneissClient;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AuthGneissCore,
+  ExpressAuthGneissClient,
+  parseCookies
+});
+//# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/index.ts", "../../src/core/AuthGneissCore.ts", "../../src/config.ts", "../../src/utils/storage/cookieHandling.ts", "../../src/frameworks/express/middleware/ExpressAuthGneissClient.ts"],
+  "sourcesContent": ["export { ExpressAuthGneissClient } from \"./frameworks\";\nexport { AuthGneissCore } from \"./core\";\nexport { parseCookies } from \"@utils\"\nexport type { AuthGneissCoreConfig } from \"./core\";\n", "import { AuthGneissCoreConfig } from \"@core/types\";\nimport axios, { AxiosResponse } from \"axios\";\nimport { Tokens } from \"@core/types\";\nimport dotenv from \"dotenv\";\nimport { AxiosError } from \"axios\";\nimport { config as generalConfig } from \"@/config\";\nimport { AuthGneissGeneralConfig } from \"@/config\";\n\n//load environment variables if not already set\nif (!process.env.ENV) {\n    dotenv.config();\n}\n\n/**\n * AuthGneissCore provides core functionality for OAuth2 authentication flow with Gneiss authentication service.\n * It handles token exchange, token refresh, user data fetching, and token validation.\n * \n * This class serves as a base class that can be extended by framework-specific implementations\n * to provide authentication middleware and handlers.\n */\nclass AuthGneissCore {\n    protected config: AuthGneissCoreConfig & AuthGneissGeneralConfig; // Configuration object\n    protected authUrl : string | undefined\n    protected loginUrl : string | undefined\n    protected logoutUrl : string | undefined\n\n    constructor(\n        devConfig: AuthGneissCoreConfig\n    ) {\n        this.config = {...devConfig, ...generalConfig};\n        this.authUrl = this.config.authUrl // Gneiss endpoint\n        this.loginUrl = this.authUrl ? `${this.authUrl}/auth/login` : undefined; // Login URL\n        this.logoutUrl = this.authUrl ? `${this.authUrl}/auth/logout` : undefined; // Logout URL\n\n        //check if environment variables are set\n        let errorMsgs = [];\n        if (!process.env.ENV) {\n            errorMsgs.push(\"ENV is not set in environment variables\");\n        }\n        if (errorMsgs.length > 0) {\n            throw new Error(errorMsgs.join(\"\\n\"));\n        }\n    }\n\n    /**\n     * getTokens is a method that exchanges an authentication code for access and refresh tokens.\n     * The client id and secret are passed as basic auth headers to authenticate the client itself.\n     * @param authCode - The authentication code received from the Gneiss authentication service.\n     * @returns A promise that resolves to an object containing the access and refresh tokens.\n     */\n    protected async getTokens(authCode : string) : Promise<Tokens> {\n        try {\n            const url : string = `${this.authUrl}/auth/access_token?auth_code=${authCode}`;\n            //Encode in base64 before transport\n            const encodedClientId = btoa(this.config.clientId);\n            const encodedClientSecret = btoa(this.config.clientSecret);\n            const response : AxiosResponse = await axios.post(url, {}, {\n                headers: {\n                    \"Authorization\": `Basic ${encodedClientId}:${encodedClientSecret}`\n                }\n            });\n            return {\n                accessToken: response.data.access_token,\n                refreshToken: response.data.refresh_token,\n                tokenType: response.data.token_type\n            } as Tokens;\n        } catch (error) {\n            // console.error(\"Error in getTokens:\", error);\n            throw error;\n        }\n    }\n    \n    /**\n     * refreshToken is a method that refreshes the access token using the refresh token.\n     * @param refreshToken - The refresh token to be used for token refresh.\n     * @returns A promise that resolves to the refreshed access token.\n     */\n    protected async refreshToken(refreshToken: string): Promise<string | null> {\n        try {\n            const url : string = `${this.authUrl}/auth/refresh`;\n            const response : AxiosResponse = await axios.post(url, {}, {\n                headers: {\n                \"Authorization\": `Bearer ${refreshToken}`\n            }\n            });\n            return response.data.access_token as string;\n        } catch (error) {\n            // console.error(\"Error in refreshToken:\", error);\n            return null;\n        }\n    }\n    \n    /**\n     * getUserData is a method that fetches user data using the access token.\n     * @param accessToken - The access token to be used for user data fetching.\n     * @returns A promise that resolves to the user data.\n     */\n    async getUserData(accessToken: string) {\n        const url : string = `${this.authUrl}/resource/user_data`;\n        const response : AxiosResponse = await axios.get(url, {\n            headers: {\n                \"Authorization\": `Bearer ${accessToken}`\n            }\n        });\n        if (response.status === 200) {\n            return response.data;\n        }\n        throw new Error(\"Failed to fetch user data\");\n    }\n    \n    /**\n     * validateToken is a method that validates the access token.\n     * @param token - The access token to be validated.\n     * @returns A promise that resolves to a boolean indicating the validity of the token.\n     */\n    protected async validateToken(token: string): Promise<boolean> {\n        try {\n            console.log(\"DEBUG: token\", token);\n            // Token validation logic\n            if (!token) {\n                return false;\n            }\n            const url : string = `${this.authUrl}/auth/validate_token`;\n            const response : AxiosResponse = await axios.get(url, {\n                headers: {\n                    \"Authorization\": `Bearer ${token}`\n                }\n            });\n            return response.status === 200;\n        } catch (error) {\n            // console.error(\"Error in validateToken:\", error);\n            if (error instanceof AxiosError && error.response?.status === 401) {\n                return false;\n            } else {\n                throw error;\n            }\n        }\n    }\n\n    /**\n     * getLoginUrl is a method that returns the login URL.\n     * @returns The login URL.\n     */\n    public getLoginUrl() : string | undefined {\n        return this.loginUrl;\n    }\n\n    /**\n     * deleteUser deletes the user\n     * */\n    protected async deleteUserData(accessToken : string) : Promise<object> {\n        const response : AxiosResponse = await axios.post(`${this.authUrl}/resource/delete_user`, {}, {\n            headers: {\n                \"Authorization\": `Bearer ${accessToken}`\n            } \n        });\n        return response.data;\n    }\n}\n\nexport default AuthGneissCore;\n", "export type AuthGneissGeneralConfig = {\n    authUrl: string\n}\n\nexport const config : AuthGneissGeneralConfig = {\n    authUrl: process.env.ENV === \"prod\" ? \"auth.gneiss.io\" : \n    process.env.ENV === \"staging\" ? \"auth.gneiss.io/testing\" : \"localhost:5000\"\n}", "import { Response } from \"express\";\nimport { JwtPayload, decode } from \"jsonwebtoken\";\nimport { Request } from \"express\";\n\n/**\n * Set the access token in the response cookies.\n * @param res - The response object.\n * @param accessToken - The access token to set.\n */\nfunction setAccessToken(res: Response, accessToken: string) {\n\n    const decodedToken = decode(accessToken) as JwtPayload;\n    \n    // decoded.exp is in seconds since epoch\n    // Date.now() returns milliseconds since epoch\n    // maxAge needs milliseconds remaining\n    if (!decodedToken.exp) {\n        throw new Error(\"Access token does not contain an expiration time\");\n    }\n    \n    res.cookie('accessToken', accessToken, {\n        httpOnly: true,\n        secure: process.env.ENV === 'prod' || process.env.ENV === 'staging',\n        sameSite: 'lax',\n        maxAge: (decodedToken.exp * 1000) - Date.now()\n    });\n}\n\n/**\n * Set the refresh token in the response cookies.\n * @param res - The response object.\n * @param refreshToken - The refresh token to set.\n */\nfunction setRefreshToken(res: Response, refreshToken: string) {\n\n    const decodedToken = decode(refreshToken) as JwtPayload;\n\n    if (!decodedToken.exp) {\n        throw new Error(\"Refresh token does not contain an expiration time\");\n    }\n\n    res.cookie('refreshToken', refreshToken, {\n        httpOnly: true,\n        secure: process.env.ENV === 'prod' || process.env.ENV === 'staging',\n        sameSite: 'lax',\n        maxAge: (decodedToken.exp * 1000) - Date.now()\n    });\n}\n\nfunction parseCookies(req: Request) : { [key: string]: string } {\n    const cookies = req.headers.cookie;\n    if (!cookies) {\n        return {};\n    }\n    return cookies.split(';').reduce((acc: { [key: string]: string }, cookie) => {\n        const [key, value] = cookie.split('=').map(s => s.trim());\n        acc[key] = value;\n        return acc;\n    }, {});\n}\n\nfunction clearCookies(res: Response) {\n    res.clearCookie(\"accessToken\", {\n        httpOnly: true,\n        secure: process.env.ENV === 'prod' || process.env.ENV === 'staging',\n        sameSite: 'strict',\n        path: '/'\n    });\n    res.clearCookie(\"refreshToken\", {\n        httpOnly: true,\n        secure: process.env.ENV === 'prod' || process.env.ENV === 'staging',\n        sameSite: 'strict',\n        path: '/'\n    });\n}\n\nexport { setAccessToken, setRefreshToken, parseCookies, clearCookies };\n", "import { AuthGneissCore, AuthGneissCoreConfig } from \"@core\";\nimport { Request, Response, NextFunction } from \"express\";\nimport { RequestWithTokens, Tokens } from \"@core/types\";\nimport { setAccessToken, setRefreshToken, parseCookies } from \"@utils\";\nimport { JwtPayload } from \"jsonwebtoken\";\nimport { AxiosError } from \"axios\";\nimport axios from \"axios\";\nimport { clearCookies } from \"@/utils/storage/cookieHandling\";\n\n/**\n * ExpressAuthGneissClient extends AuthGneissCore to provide Express-specific authentication middleware\n * and functionality for handling OAuth2 authentication flow with Gneiss authentication service.\n * \n * @extends AuthGneissCore\n * @example\n * const authClient = new ExpressAuthGneissClient({\n *   clientId: 'your-client-id',\n *   clientSecret: 'your-client-secret',\n *   redirectUrl: 'your-redirect-url'\n * });\n */\nclass ExpressAuthGneissClient extends AuthGneissCore {\n\n    constructor(\n        config: AuthGneissCoreConfig\n    ) {\n        super(config);\n        \n        // Bind the methods in constructor\n        this.requireAuth = this.requireAuth.bind(this);\n        this.handleCallBack = this.handleCallBack.bind(this);\n        this.login = this.login.bind(this);\n        this.logout = this.logout.bind(this);\n        this.getUser = this.getUser.bind(this);\n        this.deleteUser = this.deleteUser.bind(this)\n    }\n\n    /**\n     * requireAuth is a middleware function that checks if the access token is valid.\n     * If the access token is not valid, it attempts to refresh the token using the refresh token.\n     * If the refresh token is not valid, it redirects the user to the login page.\n     * @param req - The request object.\n     * @param res - The response object.\n     * @param next - The next middleware function.\n     */\n    public async requireAuth(req: Request, res: Response, next: NextFunction): Promise<void> {\n        const cookies = parseCookies(req);\n        //Check for the existence of the access token\n        console.log(\"DEBUG: cookies\", cookies);\n        try {\n            const isAccessTokenValid : boolean = await this.validateToken(cookies?.accessToken);\n            if (!isAccessTokenValid) { //if the access token is not valid\n                //try to refresh the token\n                const newAccessToken : string | null = await this.refreshToken(cookies?.refreshToken);\n                if (newAccessToken) { // set access token and then redirect to the original requested url to 'redo' the request with new access token\n                    setAccessToken(res, newAccessToken);\n                    res.redirect(req.originalUrl)\n                }\n                else {\n                    // no access token or valid refresh token, redirect to login\n                    const returnToUrl : string | undefined = req.originalUrl as string;\n                    res.redirect(`${this.loginUrl}?redirect_url=${this.config.baseClientUrl}${this.config.callbackUrl}&return_to_url=${returnToUrl}`);\n                }\n            }\n            else {\n                // access token is valid, continue to the next middleware or route handler\n                next();\n            }\n        } catch (error) {\n            // console.error('Error in requireAuth middleware:', error);\n            if (error instanceof AxiosError) {\n                res.status((error as AxiosError).response?.status || 500).send((error as AxiosError).response?.data || 'Internal server error');\n            } else {\n                res.status(500).send('Internal server error');\n            }\n        }\n    }\n\n    /**\n     * getUserData is a middleware function that fetches user data using the access token.\n     * @param req - The request object.\n     * @param res - The response object.\n     * @param next - The next middleware function.\n     */\n    public async getUser(req: Request, res: Response): Promise<void> {\n        const cookies = parseCookies(req);\n        const accessToken = cookies?.accessToken;\n        if (!accessToken) {\n            throw new Error(\"No access token found in request cookies\");\n        }\n        const userData = await this.getUserData(accessToken);\n        res.status(200).send(userData);\n    }\n\n    /**\n     * handleCallBack is a middleware function that handles the callback from the authentication service.\n     * It extracts the auth code from the request URL parameters, exchanges it for tokens, and sets the access and refresh tokens in the response cookies.\n     * @param req - The request object.\n     * @param res - The response object.\n     * @param next - The next middleware function.\n     */\n    public async handleCallBack(\n        req: Request,\n        res: Response,\n        next: NextFunction\n    ): Promise<void> {\n        try {\n            const authCode: string | undefined = req.query.auth_code as string\n            const returnToUrl : string | undefined = req.query.return_to_url as string;\n            if (!authCode) {\n                throw new Error(\"No auth code found in request url parameters\");\n            }\n\n            const tokens: Tokens = await this.getTokens(authCode);\n            \n            // Set the access and refresh tokens in the response cookies\n            setAccessToken(res, tokens.accessToken);\n            setRefreshToken(res, tokens.refreshToken);\n\n            if (returnToUrl) {\n                // Go to the original request url\n                res.redirect(returnToUrl);\n            }\n            else {\n                // Go to the root url\n                res.redirect(\"/\")\n            }\n        } catch (error) {\n            // console.error('Error in handleCallBack middleware:', error);\n            if (error instanceof AxiosError) {\n                res.status((error as AxiosError).response?.status || 500).send((error as AxiosError).response?.data || 'Internal server error');\n                console.error(\"DEBUG: error\", error);\n            } else {\n                res.status(500).send('Internal server error');\n                console.error(\"DEBUG: error\", error);\n            }\n        }\n    }\n\n    /**\n     * login is a function that redirects the user to the Gneiss authentication service for authentication.\n     * @param req - The request object.\n     * @param res - The response object.\n     */\n    public login(req: Request, res: Response): void {\n        try {\n            if (!this.loginUrl) {\n                throw new Error('Login URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.');\n            }\n            res.redirect(this.loginUrl + `?redirect_url=${this.config.baseClientUrl}${this.config.callbackUrl}`);\n        } catch (error) {\n            console.error('Error in login middleware:', error);\n            res.status(500).send('Internal server error');\n        }\n    }\n\n    /**\n     * logout is a function that redirects the user to the Gneiss logout service.\n     * @param req - The request object.\n     * @param res - The response object.\n     */\n    public logout(req: Request, res: Response): void {\n        const cookies = parseCookies(req);\n        try {\n            if (!this.logoutUrl) {\n                throw new Error('Logout URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.');\n            }\n            if (cookies?.accessToken) { // Only logout if the access token exists\n                axios.post(this.logoutUrl, {}, { // Logout\n                    headers: {\n                        \"Authorization\": `Bearer ${cookies?.accessToken}`\n                    }\n                });\n            }\n            clearCookies(res); // clear the access and refresh cookies\n            res.redirect(\"/\") // Redirect back to home after logout\n        } catch (error) {\n            console.error('Error in logout middleware:', error);\n            res.status(500).send('Internal server error');\n        }\n    }\n\n    /**\n     * Utility route handler for deleting a user\n     * This ensures that the user is fully logged out before \n     * deleting the user's data\n     * \n     * @param req - The request object.\n     * @param res - The response object.\n     */\n    public deleteUser(req: Request, res: Response) {\n        const cookies = parseCookies(req);\n        this.logout(req, res)\n        this.deleteUserData(cookies?.accessToken)\n    }\n}\n\nexport default ExpressAuthGneissClient;\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACCA,mBAAqC;AAErC,oBAAmB;AACnB,IAAAA,gBAA2B;;;ACApB,IAAM,SAAmC;AAAA,EAC5C,SAAS,QAAQ,IAAI,QAAQ,SAAS,mBACtC,QAAQ,IAAI,QAAQ,YAAY,2BAA2B;AAC/D;;;ADEA,IAAI,CAAC,QAAQ,IAAI,KAAK;AAClB,gBAAAC,QAAO,OAAO;AAClB;AASA,IAAM,iBAAN,MAAqB;AAAA,EAMjB,YACI,WACF;AACE,SAAK,SAAS,EAAC,GAAG,WAAW,GAAG,OAAa;AAC7C,SAAK,UAAU,KAAK,OAAO;AAC3B,SAAK,WAAW,KAAK,UAAU,GAAG,KAAK,OAAO,gBAAgB;AAC9D,SAAK,YAAY,KAAK,UAAU,GAAG,KAAK,OAAO,iBAAiB;AAGhE,QAAI,YAAY,CAAC;AACjB,QAAI,CAAC,QAAQ,IAAI,KAAK;AAClB,gBAAU,KAAK,yCAAyC;AAAA,IAC5D;AACA,QAAI,UAAU,SAAS,GAAG;AACtB,YAAM,IAAI,MAAM,UAAU,KAAK,IAAI,CAAC;AAAA,IACxC;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAgB,UAAU,UAAqC;AAC3D,QAAI;AACA,YAAM,MAAe,GAAG,KAAK,OAAO,gCAAgC,QAAQ;AAE5E,YAAM,kBAAkB,KAAK,KAAK,OAAO,QAAQ;AACjD,YAAM,sBAAsB,KAAK,KAAK,OAAO,YAAY;AACzD,YAAM,WAA2B,MAAM,aAAAC,QAAM,KAAK,KAAK,CAAC,GAAG;AAAA,QACvD,SAAS;AAAA,UACL,iBAAiB,SAAS,eAAe,IAAI,mBAAmB;AAAA,QACpE;AAAA,MACJ,CAAC;AACD,aAAO;AAAA,QACH,aAAa,SAAS,KAAK;AAAA,QAC3B,cAAc,SAAS,KAAK;AAAA,QAC5B,WAAW,SAAS,KAAK;AAAA,MAC7B;AAAA,IACJ,SAAS,OAAO;AAEZ,YAAM;AAAA,IACV;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAgB,aAAa,cAA8C;AACvE,QAAI;AACA,YAAM,MAAe,GAAG,KAAK,OAAO;AACpC,YAAM,WAA2B,MAAM,aAAAA,QAAM,KAAK,KAAK,CAAC,GAAG;AAAA,QACvD,SAAS;AAAA,UACT,iBAAiB,UAAU,YAAY;AAAA,QAC3C;AAAA,MACA,CAAC;AACD,aAAO,SAAS,KAAK;AAAA,IACzB,SAAS,OAAO;AAEZ,aAAO;AAAA,IACX;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAY,aAAqB;AACnC,UAAM,MAAe,GAAG,KAAK,OAAO;AACpC,UAAM,WAA2B,MAAM,aAAAA,QAAM,IAAI,KAAK;AAAA,MAClD,SAAS;AAAA,QACL,iBAAiB,UAAU,WAAW;AAAA,MAC1C;AAAA,IACJ,CAAC;AACD,QAAI,SAAS,WAAW,KAAK;AACzB,aAAO,SAAS;AAAA,IACpB;AACA,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAgB,cAAc,OAAiC;AAC3D,QAAI;AACA,cAAQ,IAAI,gBAAgB,KAAK;AAEjC,UAAI,CAAC,OAAO;AACR,eAAO;AAAA,MACX;AACA,YAAM,MAAe,GAAG,KAAK,OAAO;AACpC,YAAM,WAA2B,MAAM,aAAAA,QAAM,IAAI,KAAK;AAAA,QAClD,SAAS;AAAA,UACL,iBAAiB,UAAU,KAAK;AAAA,QACpC;AAAA,MACJ,CAAC;AACD,aAAO,SAAS,WAAW;AAAA,IAC/B,SAAS,OAAO;AAEZ,UAAI,iBAAiB,4BAAc,MAAM,UAAU,WAAW,KAAK;AAC/D,eAAO;AAAA,MACX,OAAO;AACH,cAAM;AAAA,MACV;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMO,cAAmC;AACtC,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAgB,eAAe,aAAwC;AACnE,UAAM,WAA2B,MAAM,aAAAA,QAAM,KAAK,GAAG,KAAK,OAAO,yBAAyB,CAAC,GAAG;AAAA,MAC1F,SAAS;AAAA,QACL,iBAAiB,UAAU,WAAW;AAAA,MAC1C;AAAA,IACJ,CAAC;AACD,WAAO,SAAS;AAAA,EACpB;AACJ;AAEA,IAAO,yBAAQ;;;AE/Jf,0BAAmC;AAQnC,SAAS,eAAe,KAAe,aAAqB;AAExD,QAAM,mBAAe,4BAAO,WAAW;AAKvC,MAAI,CAAC,aAAa,KAAK;AACnB,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACtE;AAEA,MAAI,OAAO,eAAe,aAAa;AAAA,IACnC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,IAAI,QAAQ;AAAA,IAC1D,UAAU;AAAA,IACV,QAAS,aAAa,MAAM,MAAQ,KAAK,IAAI;AAAA,EACjD,CAAC;AACL;AAOA,SAAS,gBAAgB,KAAe,cAAsB;AAE1D,QAAM,mBAAe,4BAAO,YAAY;AAExC,MAAI,CAAC,aAAa,KAAK;AACnB,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACvE;AAEA,MAAI,OAAO,gBAAgB,cAAc;AAAA,IACrC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,IAAI,QAAQ;AAAA,IAC1D,UAAU;AAAA,IACV,QAAS,aAAa,MAAM,MAAQ,KAAK,IAAI;AAAA,EACjD,CAAC;AACL;AAEA,SAAS,aAAa,KAA0C;AAC5D,QAAM,UAAU,IAAI,QAAQ;AAC5B,MAAI,CAAC,SAAS;AACV,WAAO,CAAC;AAAA,EACZ;AACA,SAAO,QAAQ,MAAM,GAAG,EAAE,OAAO,CAAC,KAAgC,WAAW;AACzE,UAAM,CAAC,KAAK,KAAK,IAAI,OAAO,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC;AACxD,QAAI,GAAG,IAAI;AACX,WAAO;AAAA,EACX,GAAG,CAAC,CAAC;AACT;AAEA,SAAS,aAAa,KAAe;AACjC,MAAI,YAAY,eAAe;AAAA,IAC3B,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,IAAI,QAAQ;AAAA,IAC1D,UAAU;AAAA,IACV,MAAM;AAAA,EACV,CAAC;AACD,MAAI,YAAY,gBAAgB;AAAA,IAC5B,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,IAAI,QAAQ;AAAA,IAC1D,UAAU;AAAA,IACV,MAAM;AAAA,EACV,CAAC;AACL;;;ACrEA,IAAAC,gBAA2B;AAC3B,IAAAA,gBAAkB;AAelB,IAAM,0BAAN,cAAsC,uBAAe;AAAA,EAEjD,YACIC,SACF;AACE,UAAMA,OAAM;AAGZ,SAAK,cAAc,KAAK,YAAY,KAAK,IAAI;AAC7C,SAAK,iBAAiB,KAAK,eAAe,KAAK,IAAI;AACnD,SAAK,QAAQ,KAAK,MAAM,KAAK,IAAI;AACjC,SAAK,SAAS,KAAK,OAAO,KAAK,IAAI;AACnC,SAAK,UAAU,KAAK,QAAQ,KAAK,IAAI;AACrC,SAAK,aAAa,KAAK,WAAW,KAAK,IAAI;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAa,YAAY,KAAc,KAAe,MAAmC;AACrF,UAAM,UAAU,aAAa,GAAG;AAEhC,YAAQ,IAAI,kBAAkB,OAAO;AACrC,QAAI;AACA,YAAM,qBAA+B,MAAM,KAAK,cAAc,SAAS,WAAW;AAClF,UAAI,CAAC,oBAAoB;AAErB,cAAM,iBAAiC,MAAM,KAAK,aAAa,SAAS,YAAY;AACpF,YAAI,gBAAgB;AAChB,yBAAe,KAAK,cAAc;AAClC,cAAI,SAAS,IAAI,WAAW;AAAA,QAChC,OACK;AAED,gBAAM,cAAmC,IAAI;AAC7C,cAAI,SAAS,GAAG,KAAK,QAAQ,iBAAiB,KAAK,OAAO,aAAa,GAAG,KAAK,OAAO,WAAW,kBAAkB,WAAW,EAAE;AAAA,QACpI;AAAA,MACJ,OACK;AAED,aAAK;AAAA,MACT;AAAA,IACJ,SAAS,OAAO;AAEZ,UAAI,iBAAiB,0BAAY;AAC7B,YAAI,OAAQ,MAAqB,UAAU,UAAU,GAAG,EAAE,KAAM,MAAqB,UAAU,QAAQ,uBAAuB;AAAA,MAClI,OAAO;AACH,YAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,MAChD;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,QAAQ,KAAc,KAA8B;AAC7D,UAAM,UAAU,aAAa,GAAG;AAChC,UAAM,cAAc,SAAS;AAC7B,QAAI,CAAC,aAAa;AACd,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC9D;AACA,UAAM,WAAW,MAAM,KAAK,YAAY,WAAW;AACnD,QAAI,OAAO,GAAG,EAAE,KAAK,QAAQ;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAa,eACT,KACA,KACA,MACa;AACb,QAAI;AACA,YAAM,WAA+B,IAAI,MAAM;AAC/C,YAAM,cAAmC,IAAI,MAAM;AACnD,UAAI,CAAC,UAAU;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAClE;AAEA,YAAM,SAAiB,MAAM,KAAK,UAAU,QAAQ;AAGpD,qBAAe,KAAK,OAAO,WAAW;AACtC,sBAAgB,KAAK,OAAO,YAAY;AAExC,UAAI,aAAa;AAEb,YAAI,SAAS,WAAW;AAAA,MAC5B,OACK;AAED,YAAI,SAAS,GAAG;AAAA,MACpB;AAAA,IACJ,SAAS,OAAO;AAEZ,UAAI,iBAAiB,0BAAY;AAC7B,YAAI,OAAQ,MAAqB,UAAU,UAAU,GAAG,EAAE,KAAM,MAAqB,UAAU,QAAQ,uBAAuB;AAC9H,gBAAQ,MAAM,gBAAgB,KAAK;AAAA,MACvC,OAAO;AACH,YAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAC5C,gBAAQ,MAAM,gBAAgB,KAAK;AAAA,MACvC;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,MAAM,KAAc,KAAqB;AAC5C,QAAI;AACA,UAAI,CAAC,KAAK,UAAU;AAChB,cAAM,IAAI,MAAM,oFAAoF;AAAA,MACxG;AACA,UAAI,SAAS,KAAK,WAAW,iBAAiB,KAAK,OAAO,aAAa,GAAG,KAAK,OAAO,WAAW,EAAE;AAAA,IACvG,SAAS,OAAO;AACZ,cAAQ,MAAM,8BAA8B,KAAK;AACjD,UAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,IAChD;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,OAAO,KAAc,KAAqB;AAC7C,UAAM,UAAU,aAAa,GAAG;AAChC,QAAI;AACA,UAAI,CAAC,KAAK,WAAW;AACjB,cAAM,IAAI,MAAM,qFAAqF;AAAA,MACzG;AACA,UAAI,SAAS,aAAa;AACtB,sBAAAC,QAAM,KAAK,KAAK,WAAW,CAAC,GAAG;AAAA;AAAA,UAC3B,SAAS;AAAA,YACL,iBAAiB,UAAU,SAAS,WAAW;AAAA,UACnD;AAAA,QACJ,CAAC;AAAA,MACL;AACA,mBAAa,GAAG;AAChB,UAAI,SAAS,GAAG;AAAA,IACpB,SAAS,OAAO;AACZ,cAAQ,MAAM,+BAA+B,KAAK;AAClD,UAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,IAChD;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUO,WAAW,KAAc,KAAe;AAC3C,UAAM,UAAU,aAAa,GAAG;AAChC,SAAK,OAAO,KAAK,GAAG;AACpB,SAAK,eAAe,SAAS,WAAW;AAAA,EAC5C;AACJ;AAEA,IAAO,kCAAQ;",
+  "names": ["import_axios", "dotenv", "axios", "import_axios", "config", "axios"]
+}

package/dist/esm/index.js

@@ -0,0 +1,343 @@
+// src/core/AuthGneissCore.ts
+import axios from "axios";
+import dotenv from "dotenv";
+import { AxiosError } from "axios";
+
+// src/config.ts
+var config = {
+  authUrl: process.env.ENV === "prod" ? "auth.gneiss.io" : process.env.ENV === "staging" ? "auth.gneiss.io/testing" : "localhost:5000"
+};
+
+// src/core/AuthGneissCore.ts
+if (!process.env.ENV) {
+  dotenv.config();
+}
+var AuthGneissCore = class {
+  constructor(devConfig) {
+    this.config = { ...devConfig, ...config };
+    this.authUrl = this.config.authUrl;
+    this.loginUrl = this.authUrl ? `${this.authUrl}/auth/login` : void 0;
+    this.logoutUrl = this.authUrl ? `${this.authUrl}/auth/logout` : void 0;
+    let errorMsgs = [];
+    if (!process.env.ENV) {
+      errorMsgs.push("ENV is not set in environment variables");
+    }
+    if (errorMsgs.length > 0) {
+      throw new Error(errorMsgs.join("\n"));
+    }
+  }
+  /**
+   * getTokens is a method that exchanges an authentication code for access and refresh tokens.
+   * The client id and secret are passed as basic auth headers to authenticate the client itself.
+   * @param authCode - The authentication code received from the Gneiss authentication service.
+   * @returns A promise that resolves to an object containing the access and refresh tokens.
+   */
+  async getTokens(authCode) {
+    try {
+      const url = `${this.authUrl}/auth/access_token?auth_code=${authCode}`;
+      const encodedClientId = btoa(this.config.clientId);
+      const encodedClientSecret = btoa(this.config.clientSecret);
+      const response = await axios.post(url, {}, {
+        headers: {
+          "Authorization": `Basic ${encodedClientId}:${encodedClientSecret}`
+        }
+      });
+      return {
+        accessToken: response.data.access_token,
+        refreshToken: response.data.refresh_token,
+        tokenType: response.data.token_type
+      };
+    } catch (error) {
+      throw error;
+    }
+  }
+  /**
+   * refreshToken is a method that refreshes the access token using the refresh token.
+   * @param refreshToken - The refresh token to be used for token refresh.
+   * @returns A promise that resolves to the refreshed access token.
+   */
+  async refreshToken(refreshToken) {
+    try {
+      const url = `${this.authUrl}/auth/refresh`;
+      const response = await axios.post(url, {}, {
+        headers: {
+          "Authorization": `Bearer ${refreshToken}`
+        }
+      });
+      return response.data.access_token;
+    } catch (error) {
+      return null;
+    }
+  }
+  /**
+   * getUserData is a method that fetches user data using the access token.
+   * @param accessToken - The access token to be used for user data fetching.
+   * @returns A promise that resolves to the user data.
+   */
+  async getUserData(accessToken) {
+    const url = `${this.authUrl}/resource/user_data`;
+    const response = await axios.get(url, {
+      headers: {
+        "Authorization": `Bearer ${accessToken}`
+      }
+    });
+    if (response.status === 200) {
+      return response.data;
+    }
+    throw new Error("Failed to fetch user data");
+  }
+  /**
+   * validateToken is a method that validates the access token.
+   * @param token - The access token to be validated.
+   * @returns A promise that resolves to a boolean indicating the validity of the token.
+   */
+  async validateToken(token) {
+    try {
+      console.log("DEBUG: token", token);
+      if (!token) {
+        return false;
+      }
+      const url = `${this.authUrl}/auth/validate_token`;
+      const response = await axios.get(url, {
+        headers: {
+          "Authorization": `Bearer ${token}`
+        }
+      });
+      return response.status === 200;
+    } catch (error) {
+      if (error instanceof AxiosError && error.response?.status === 401) {
+        return false;
+      } else {
+        throw error;
+      }
+    }
+  }
+  /**
+   * getLoginUrl is a method that returns the login URL.
+   * @returns The login URL.
+   */
+  getLoginUrl() {
+    return this.loginUrl;
+  }
+  /**
+   * deleteUser deletes the user
+   * */
+  async deleteUserData(accessToken) {
+    const response = await axios.post(`${this.authUrl}/resource/delete_user`, {}, {
+      headers: {
+        "Authorization": `Bearer ${accessToken}`
+      }
+    });
+    return response.data;
+  }
+};
+var AuthGneissCore_default = AuthGneissCore;
+
+// src/utils/storage/cookieHandling.ts
+import { decode } from "jsonwebtoken";
+function setAccessToken(res, accessToken) {
+  const decodedToken = decode(accessToken);
+  if (!decodedToken.exp) {
+    throw new Error("Access token does not contain an expiration time");
+  }
+  res.cookie("accessToken", accessToken, {
+    httpOnly: true,
+    secure: process.env.ENV === "prod" || process.env.ENV === "staging",
+    sameSite: "lax",
+    maxAge: decodedToken.exp * 1e3 - Date.now()
+  });
+}
+function setRefreshToken(res, refreshToken) {
+  const decodedToken = decode(refreshToken);
+  if (!decodedToken.exp) {
+    throw new Error("Refresh token does not contain an expiration time");
+  }
+  res.cookie("refreshToken", refreshToken, {
+    httpOnly: true,
+    secure: process.env.ENV === "prod" || process.env.ENV === "staging",
+    sameSite: "lax",
+    maxAge: decodedToken.exp * 1e3 - Date.now()
+  });
+}
+function parseCookies(req) {
+  const cookies = req.headers.cookie;
+  if (!cookies) {
+    return {};
+  }
+  return cookies.split(";").reduce((acc, cookie) => {
+    const [key, value] = cookie.split("=").map((s) => s.trim());
+    acc[key] = value;
+    return acc;
+  }, {});
+}
+function clearCookies(res) {
+  res.clearCookie("accessToken", {
+    httpOnly: true,
+    secure: process.env.ENV === "prod" || process.env.ENV === "staging",
+    sameSite: "strict",
+    path: "/"
+  });
+  res.clearCookie("refreshToken", {
+    httpOnly: true,
+    secure: process.env.ENV === "prod" || process.env.ENV === "staging",
+    sameSite: "strict",
+    path: "/"
+  });
+}
+
+// src/frameworks/express/middleware/ExpressAuthGneissClient.ts
+import { AxiosError as AxiosError2 } from "axios";
+import axios2 from "axios";
+var ExpressAuthGneissClient = class extends AuthGneissCore_default {
+  constructor(config2) {
+    super(config2);
+    this.requireAuth = this.requireAuth.bind(this);
+    this.handleCallBack = this.handleCallBack.bind(this);
+    this.login = this.login.bind(this);
+    this.logout = this.logout.bind(this);
+    this.getUser = this.getUser.bind(this);
+    this.deleteUser = this.deleteUser.bind(this);
+  }
+  /**
+   * requireAuth is a middleware function that checks if the access token is valid.
+   * If the access token is not valid, it attempts to refresh the token using the refresh token.
+   * If the refresh token is not valid, it redirects the user to the login page.
+   * @param req - The request object.
+   * @param res - The response object.
+   * @param next - The next middleware function.
+   */
+  async requireAuth(req, res, next) {
+    const cookies = parseCookies(req);
+    console.log("DEBUG: cookies", cookies);
+    try {
+      const isAccessTokenValid = await this.validateToken(cookies?.accessToken);
+      if (!isAccessTokenValid) {
+        const newAccessToken = await this.refreshToken(cookies?.refreshToken);
+        if (newAccessToken) {
+          setAccessToken(res, newAccessToken);
+          res.redirect(req.originalUrl);
+        } else {
+          const returnToUrl = req.originalUrl;
+          res.redirect(`${this.loginUrl}?redirect_url=${this.config.baseClientUrl}${this.config.callbackUrl}&return_to_url=${returnToUrl}`);
+        }
+      } else {
+        next();
+      }
+    } catch (error) {
+      if (error instanceof AxiosError2) {
+        res.status(error.response?.status || 500).send(error.response?.data || "Internal server error");
+      } else {
+        res.status(500).send("Internal server error");
+      }
+    }
+  }
+  /**
+   * getUserData is a middleware function that fetches user data using the access token.
+   * @param req - The request object.
+   * @param res - The response object.
+   * @param next - The next middleware function.
+   */
+  async getUser(req, res) {
+    const cookies = parseCookies(req);
+    const accessToken = cookies?.accessToken;
+    if (!accessToken) {
+      throw new Error("No access token found in request cookies");
+    }
+    const userData = await this.getUserData(accessToken);
+    res.status(200).send(userData);
+  }
+  /**
+   * handleCallBack is a middleware function that handles the callback from the authentication service.
+   * It extracts the auth code from the request URL parameters, exchanges it for tokens, and sets the access and refresh tokens in the response cookies.
+   * @param req - The request object.
+   * @param res - The response object.
+   * @param next - The next middleware function.
+   */
+  async handleCallBack(req, res, next) {
+    try {
+      const authCode = req.query.auth_code;
+      const returnToUrl = req.query.return_to_url;
+      if (!authCode) {
+        throw new Error("No auth code found in request url parameters");
+      }
+      const tokens = await this.getTokens(authCode);
+      setAccessToken(res, tokens.accessToken);
+      setRefreshToken(res, tokens.refreshToken);
+      if (returnToUrl) {
+        res.redirect(returnToUrl);
+      } else {
+        res.redirect("/");
+      }
+    } catch (error) {
+      if (error instanceof AxiosError2) {
+        res.status(error.response?.status || 500).send(error.response?.data || "Internal server error");
+        console.error("DEBUG: error", error);
+      } else {
+        res.status(500).send("Internal server error");
+        console.error("DEBUG: error", error);
+      }
+    }
+  }
+  /**
+   * login is a function that redirects the user to the Gneiss authentication service for authentication.
+   * @param req - The request object.
+   * @param res - The response object.
+   */
+  login(req, res) {
+    try {
+      if (!this.loginUrl) {
+        throw new Error("Login URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.");
+      }
+      res.redirect(this.loginUrl + `?redirect_url=${this.config.baseClientUrl}${this.config.callbackUrl}`);
+    } catch (error) {
+      console.error("Error in login middleware:", error);
+      res.status(500).send("Internal server error");
+    }
+  }
+  /**
+   * logout is a function that redirects the user to the Gneiss logout service.
+   * @param req - The request object.
+   * @param res - The response object.
+   */
+  logout(req, res) {
+    const cookies = parseCookies(req);
+    try {
+      if (!this.logoutUrl) {
+        throw new Error("Logout URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.");
+      }
+      if (cookies?.accessToken) {
+        axios2.post(this.logoutUrl, {}, {
+          // Logout
+          headers: {
+            "Authorization": `Bearer ${cookies?.accessToken}`
+          }
+        });
+      }
+      clearCookies(res);
+      res.redirect("/");
+    } catch (error) {
+      console.error("Error in logout middleware:", error);
+      res.status(500).send("Internal server error");
+    }
+  }
+  /**
+   * Utility route handler for deleting a user
+   * This ensures that the user is fully logged out before 
+   * deleting the user's data
+   * 
+   * @param req - The request object.
+   * @param res - The response object.
+   */
+  deleteUser(req, res) {
+    const cookies = parseCookies(req);
+    this.logout(req, res);
+    this.deleteUserData(cookies?.accessToken);
+  }
+};
+var ExpressAuthGneissClient_default = ExpressAuthGneissClient;
+export {
+  AuthGneissCore_default as AuthGneissCore,
+  ExpressAuthGneissClient_default as ExpressAuthGneissClient,
+  parseCookies
+};
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/core/AuthGneissCore.ts", "../../src/config.ts", "../../src/utils/storage/cookieHandling.ts", "../../src/frameworks/express/middleware/ExpressAuthGneissClient.ts"],
+  "sourcesContent": ["import { AuthGneissCoreConfig } from \"@core/types\";\nimport axios, { AxiosResponse } from \"axios\";\nimport { Tokens } from \"@core/types\";\nimport dotenv from \"dotenv\";\nimport { AxiosError } from \"axios\";\nimport { config as generalConfig } from \"@/config\";\nimport { AuthGneissGeneralConfig } from \"@/config\";\n\n//load environment variables if not already set\nif (!process.env.ENV) {\n    dotenv.config();\n}\n\n/**\n * AuthGneissCore provides core functionality for OAuth2 authentication flow with Gneiss authentication service.\n * It handles token exchange, token refresh, user data fetching, and token validation.\n * \n * This class serves as a base class that can be extended by framework-specific implementations\n * to provide authentication middleware and handlers.\n */\nclass AuthGneissCore {\n    protected config: AuthGneissCoreConfig & AuthGneissGeneralConfig; // Configuration object\n    protected authUrl : string | undefined\n    protected loginUrl : string | undefined\n    protected logoutUrl : string | undefined\n\n    constructor(\n        devConfig: AuthGneissCoreConfig\n    ) {\n        this.config = {...devConfig, ...generalConfig};\n        this.authUrl = this.config.authUrl // Gneiss endpoint\n        this.loginUrl = this.authUrl ? `${this.authUrl}/auth/login` : undefined; // Login URL\n        this.logoutUrl = this.authUrl ? `${this.authUrl}/auth/logout` : undefined; // Logout URL\n\n        //check if environment variables are set\n        let errorMsgs = [];\n        if (!process.env.ENV) {\n            errorMsgs.push(\"ENV is not set in environment variables\");\n        }\n        if (errorMsgs.length > 0) {\n            throw new Error(errorMsgs.join(\"\\n\"));\n        }\n    }\n\n    /**\n     * getTokens is a method that exchanges an authentication code for access and refresh tokens.\n     * The client id and secret are passed as basic auth headers to authenticate the client itself.\n     * @param authCode - The authentication code received from the Gneiss authentication service.\n     * @returns A promise that resolves to an object containing the access and refresh tokens.\n     */\n    protected async getTokens(authCode : string) : Promise<Tokens> {\n        try {\n            const url : string = `${this.authUrl}/auth/access_token?auth_code=${authCode}`;\n            //Encode in base64 before transport\n            const encodedClientId = btoa(this.config.clientId);\n            const encodedClientSecret = btoa(this.config.clientSecret);\n            const response : AxiosResponse = await axios.post(url, {}, {\n                headers: {\n                    \"Authorization\": `Basic ${encodedClientId}:${encodedClientSecret}`\n                }\n            });\n            return {\n                accessToken: response.data.access_token,\n                refreshToken: response.data.refresh_token,\n                tokenType: response.data.token_type\n            } as Tokens;\n        } catch (error) {\n            // console.error(\"Error in getTokens:\", error);\n            throw error;\n        }\n    }\n    \n    /**\n     * refreshToken is a method that refreshes the access token using the refresh token.\n     * @param refreshToken - The refresh token to be used for token refresh.\n     * @returns A promise that resolves to the refreshed access token.\n     */\n    protected async refreshToken(refreshToken: string): Promise<string | null> {\n        try {\n            const url : string = `${this.authUrl}/auth/refresh`;\n            const response : AxiosResponse = await axios.post(url, {}, {\n                headers: {\n                \"Authorization\": `Bearer ${refreshToken}`\n            }\n            });\n            return response.data.access_token as string;\n        } catch (error) {\n            // console.error(\"Error in refreshToken:\", error);\n            return null;\n        }\n    }\n    \n    /**\n     * getUserData is a method that fetches user data using the access token.\n     * @param accessToken - The access token to be used for user data fetching.\n     * @returns A promise that resolves to the user data.\n     */\n    async getUserData(accessToken: string) {\n        const url : string = `${this.authUrl}/resource/user_data`;\n        const response : AxiosResponse = await axios.get(url, {\n            headers: {\n                \"Authorization\": `Bearer ${accessToken}`\n            }\n        });\n        if (response.status === 200) {\n            return response.data;\n        }\n        throw new Error(\"Failed to fetch user data\");\n    }\n    \n    /**\n     * validateToken is a method that validates the access token.\n     * @param token - The access token to be validated.\n     * @returns A promise that resolves to a boolean indicating the validity of the token.\n     */\n    protected async validateToken(token: string): Promise<boolean> {\n        try {\n            console.log(\"DEBUG: token\", token);\n            // Token validation logic\n            if (!token) {\n                return false;\n            }\n            const url : string = `${this.authUrl}/auth/validate_token`;\n            const response : AxiosResponse = await axios.get(url, {\n                headers: {\n                    \"Authorization\": `Bearer ${token}`\n                }\n            });\n            return response.status === 200;\n        } catch (error) {\n            // console.error(\"Error in validateToken:\", error);\n            if (error instanceof AxiosError && error.response?.status === 401) {\n                return false;\n            } else {\n                throw error;\n            }\n        }\n    }\n\n    /**\n     * getLoginUrl is a method that returns the login URL.\n     * @returns The login URL.\n     */\n    public getLoginUrl() : string | undefined {\n        return this.loginUrl;\n    }\n\n    /**\n     * deleteUser deletes the user\n     * */\n    protected async deleteUserData(accessToken : string) : Promise<object> {\n        const response : AxiosResponse = await axios.post(`${this.authUrl}/resource/delete_user`, {}, {\n            headers: {\n                \"Authorization\": `Bearer ${accessToken}`\n            } \n        });\n        return response.data;\n    }\n}\n\nexport default AuthGneissCore;\n", "export type AuthGneissGeneralConfig = {\n    authUrl: string\n}\n\nexport const config : AuthGneissGeneralConfig = {\n    authUrl: process.env.ENV === \"prod\" ? \"auth.gneiss.io\" : \n    process.env.ENV === \"staging\" ? \"auth.gneiss.io/testing\" : \"localhost:5000\"\n}", "import { Response } from \"express\";\nimport { JwtPayload, decode } from \"jsonwebtoken\";\nimport { Request } from \"express\";\n\n/**\n * Set the access token in the response cookies.\n * @param res - The response object.\n * @param accessToken - The access token to set.\n */\nfunction setAccessToken(res: Response, accessToken: string) {\n\n    const decodedToken = decode(accessToken) as JwtPayload;\n    \n    // decoded.exp is in seconds since epoch\n    // Date.now() returns milliseconds since epoch\n    // maxAge needs milliseconds remaining\n    if (!decodedToken.exp) {\n        throw new Error(\"Access token does not contain an expiration time\");\n    }\n    \n    res.cookie('accessToken', accessToken, {\n        httpOnly: true,\n        secure: process.env.ENV === 'prod' || process.env.ENV === 'staging',\n        sameSite: 'lax',\n        maxAge: (decodedToken.exp * 1000) - Date.now()\n    });\n}\n\n/**\n * Set the refresh token in the response cookies.\n * @param res - The response object.\n * @param refreshToken - The refresh token to set.\n */\nfunction setRefreshToken(res: Response, refreshToken: string) {\n\n    const decodedToken = decode(refreshToken) as JwtPayload;\n\n    if (!decodedToken.exp) {\n        throw new Error(\"Refresh token does not contain an expiration time\");\n    }\n\n    res.cookie('refreshToken', refreshToken, {\n        httpOnly: true,\n        secure: process.env.ENV === 'prod' || process.env.ENV === 'staging',\n        sameSite: 'lax',\n        maxAge: (decodedToken.exp * 1000) - Date.now()\n    });\n}\n\nfunction parseCookies(req: Request) : { [key: string]: string } {\n    const cookies = req.headers.cookie;\n    if (!cookies) {\n        return {};\n    }\n    return cookies.split(';').reduce((acc: { [key: string]: string }, cookie) => {\n        const [key, value] = cookie.split('=').map(s => s.trim());\n        acc[key] = value;\n        return acc;\n    }, {});\n}\n\nfunction clearCookies(res: Response) {\n    res.clearCookie(\"accessToken\", {\n        httpOnly: true,\n        secure: process.env.ENV === 'prod' || process.env.ENV === 'staging',\n        sameSite: 'strict',\n        path: '/'\n    });\n    res.clearCookie(\"refreshToken\", {\n        httpOnly: true,\n        secure: process.env.ENV === 'prod' || process.env.ENV === 'staging',\n        sameSite: 'strict',\n        path: '/'\n    });\n}\n\nexport { setAccessToken, setRefreshToken, parseCookies, clearCookies };\n", "import { AuthGneissCore, AuthGneissCoreConfig } from \"@core\";\nimport { Request, Response, NextFunction } from \"express\";\nimport { RequestWithTokens, Tokens } from \"@core/types\";\nimport { setAccessToken, setRefreshToken, parseCookies } from \"@utils\";\nimport { JwtPayload } from \"jsonwebtoken\";\nimport { AxiosError } from \"axios\";\nimport axios from \"axios\";\nimport { clearCookies } from \"@/utils/storage/cookieHandling\";\n\n/**\n * ExpressAuthGneissClient extends AuthGneissCore to provide Express-specific authentication middleware\n * and functionality for handling OAuth2 authentication flow with Gneiss authentication service.\n * \n * @extends AuthGneissCore\n * @example\n * const authClient = new ExpressAuthGneissClient({\n *   clientId: 'your-client-id',\n *   clientSecret: 'your-client-secret',\n *   redirectUrl: 'your-redirect-url'\n * });\n */\nclass ExpressAuthGneissClient extends AuthGneissCore {\n\n    constructor(\n        config: AuthGneissCoreConfig\n    ) {\n        super(config);\n        \n        // Bind the methods in constructor\n        this.requireAuth = this.requireAuth.bind(this);\n        this.handleCallBack = this.handleCallBack.bind(this);\n        this.login = this.login.bind(this);\n        this.logout = this.logout.bind(this);\n        this.getUser = this.getUser.bind(this);\n        this.deleteUser = this.deleteUser.bind(this)\n    }\n\n    /**\n     * requireAuth is a middleware function that checks if the access token is valid.\n     * If the access token is not valid, it attempts to refresh the token using the refresh token.\n     * If the refresh token is not valid, it redirects the user to the login page.\n     * @param req - The request object.\n     * @param res - The response object.\n     * @param next - The next middleware function.\n     */\n    public async requireAuth(req: Request, res: Response, next: NextFunction): Promise<void> {\n        const cookies = parseCookies(req);\n        //Check for the existence of the access token\n        console.log(\"DEBUG: cookies\", cookies);\n        try {\n            const isAccessTokenValid : boolean = await this.validateToken(cookies?.accessToken);\n            if (!isAccessTokenValid) { //if the access token is not valid\n                //try to refresh the token\n                const newAccessToken : string | null = await this.refreshToken(cookies?.refreshToken);\n                if (newAccessToken) { // set access token and then redirect to the original requested url to 'redo' the request with new access token\n                    setAccessToken(res, newAccessToken);\n                    res.redirect(req.originalUrl)\n                }\n                else {\n                    // no access token or valid refresh token, redirect to login\n                    const returnToUrl : string | undefined = req.originalUrl as string;\n                    res.redirect(`${this.loginUrl}?redirect_url=${this.config.baseClientUrl}${this.config.callbackUrl}&return_to_url=${returnToUrl}`);\n                }\n            }\n            else {\n                // access token is valid, continue to the next middleware or route handler\n                next();\n            }\n        } catch (error) {\n            // console.error('Error in requireAuth middleware:', error);\n            if (error instanceof AxiosError) {\n                res.status((error as AxiosError).response?.status || 500).send((error as AxiosError).response?.data || 'Internal server error');\n            } else {\n                res.status(500).send('Internal server error');\n            }\n        }\n    }\n\n    /**\n     * getUserData is a middleware function that fetches user data using the access token.\n     * @param req - The request object.\n     * @param res - The response object.\n     * @param next - The next middleware function.\n     */\n    public async getUser(req: Request, res: Response): Promise<void> {\n        const cookies = parseCookies(req);\n        const accessToken = cookies?.accessToken;\n        if (!accessToken) {\n            throw new Error(\"No access token found in request cookies\");\n        }\n        const userData = await this.getUserData(accessToken);\n        res.status(200).send(userData);\n    }\n\n    /**\n     * handleCallBack is a middleware function that handles the callback from the authentication service.\n     * It extracts the auth code from the request URL parameters, exchanges it for tokens, and sets the access and refresh tokens in the response cookies.\n     * @param req - The request object.\n     * @param res - The response object.\n     * @param next - The next middleware function.\n     */\n    public async handleCallBack(\n        req: Request,\n        res: Response,\n        next: NextFunction\n    ): Promise<void> {\n        try {\n            const authCode: string | undefined = req.query.auth_code as string\n            const returnToUrl : string | undefined = req.query.return_to_url as string;\n            if (!authCode) {\n                throw new Error(\"No auth code found in request url parameters\");\n            }\n\n            const tokens: Tokens = await this.getTokens(authCode);\n            \n            // Set the access and refresh tokens in the response cookies\n            setAccessToken(res, tokens.accessToken);\n            setRefreshToken(res, tokens.refreshToken);\n\n            if (returnToUrl) {\n                // Go to the original request url\n                res.redirect(returnToUrl);\n            }\n            else {\n                // Go to the root url\n                res.redirect(\"/\")\n            }\n        } catch (error) {\n            // console.error('Error in handleCallBack middleware:', error);\n            if (error instanceof AxiosError) {\n                res.status((error as AxiosError).response?.status || 500).send((error as AxiosError).response?.data || 'Internal server error');\n                console.error(\"DEBUG: error\", error);\n            } else {\n                res.status(500).send('Internal server error');\n                console.error(\"DEBUG: error\", error);\n            }\n        }\n    }\n\n    /**\n     * login is a function that redirects the user to the Gneiss authentication service for authentication.\n     * @param req - The request object.\n     * @param res - The response object.\n     */\n    public login(req: Request, res: Response): void {\n        try {\n            if (!this.loginUrl) {\n                throw new Error('Login URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.');\n            }\n            res.redirect(this.loginUrl + `?redirect_url=${this.config.baseClientUrl}${this.config.callbackUrl}`);\n        } catch (error) {\n            console.error('Error in login middleware:', error);\n            res.status(500).send('Internal server error');\n        }\n    }\n\n    /**\n     * logout is a function that redirects the user to the Gneiss logout service.\n     * @param req - The request object.\n     * @param res - The response object.\n     */\n    public logout(req: Request, res: Response): void {\n        const cookies = parseCookies(req);\n        try {\n            if (!this.logoutUrl) {\n                throw new Error('Logout URL is not configured. Check if GNEISS_ENDPOINT environment variable is set.');\n            }\n            if (cookies?.accessToken) { // Only logout if the access token exists\n                axios.post(this.logoutUrl, {}, { // Logout\n                    headers: {\n                        \"Authorization\": `Bearer ${cookies?.accessToken}`\n                    }\n                });\n            }\n            clearCookies(res); // clear the access and refresh cookies\n            res.redirect(\"/\") // Redirect back to home after logout\n        } catch (error) {\n            console.error('Error in logout middleware:', error);\n            res.status(500).send('Internal server error');\n        }\n    }\n\n    /**\n     * Utility route handler for deleting a user\n     * This ensures that the user is fully logged out before \n     * deleting the user's data\n     * \n     * @param req - The request object.\n     * @param res - The response object.\n     */\n    public deleteUser(req: Request, res: Response) {\n        const cookies = parseCookies(req);\n        this.logout(req, res)\n        this.deleteUserData(cookies?.accessToken)\n    }\n}\n\nexport default ExpressAuthGneissClient;\n"],
+  "mappings": ";AACA,OAAO,WAA8B;AAErC,OAAO,YAAY;AACnB,SAAS,kBAAkB;;;ACApB,IAAM,SAAmC;AAAA,EAC5C,SAAS,QAAQ,IAAI,QAAQ,SAAS,mBACtC,QAAQ,IAAI,QAAQ,YAAY,2BAA2B;AAC/D;;;ADEA,IAAI,CAAC,QAAQ,IAAI,KAAK;AAClB,SAAO,OAAO;AAClB;AASA,IAAM,iBAAN,MAAqB;AAAA,EAMjB,YACI,WACF;AACE,SAAK,SAAS,EAAC,GAAG,WAAW,GAAG,OAAa;AAC7C,SAAK,UAAU,KAAK,OAAO;AAC3B,SAAK,WAAW,KAAK,UAAU,GAAG,KAAK,OAAO,gBAAgB;AAC9D,SAAK,YAAY,KAAK,UAAU,GAAG,KAAK,OAAO,iBAAiB;AAGhE,QAAI,YAAY,CAAC;AACjB,QAAI,CAAC,QAAQ,IAAI,KAAK;AAClB,gBAAU,KAAK,yCAAyC;AAAA,IAC5D;AACA,QAAI,UAAU,SAAS,GAAG;AACtB,YAAM,IAAI,MAAM,UAAU,KAAK,IAAI,CAAC;AAAA,IACxC;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAgB,UAAU,UAAqC;AAC3D,QAAI;AACA,YAAM,MAAe,GAAG,KAAK,OAAO,gCAAgC,QAAQ;AAE5E,YAAM,kBAAkB,KAAK,KAAK,OAAO,QAAQ;AACjD,YAAM,sBAAsB,KAAK,KAAK,OAAO,YAAY;AACzD,YAAM,WAA2B,MAAM,MAAM,KAAK,KAAK,CAAC,GAAG;AAAA,QACvD,SAAS;AAAA,UACL,iBAAiB,SAAS,eAAe,IAAI,mBAAmB;AAAA,QACpE;AAAA,MACJ,CAAC;AACD,aAAO;AAAA,QACH,aAAa,SAAS,KAAK;AAAA,QAC3B,cAAc,SAAS,KAAK;AAAA,QAC5B,WAAW,SAAS,KAAK;AAAA,MAC7B;AAAA,IACJ,SAAS,OAAO;AAEZ,YAAM;AAAA,IACV;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAgB,aAAa,cAA8C;AACvE,QAAI;AACA,YAAM,MAAe,GAAG,KAAK,OAAO;AACpC,YAAM,WAA2B,MAAM,MAAM,KAAK,KAAK,CAAC,GAAG;AAAA,QACvD,SAAS;AAAA,UACT,iBAAiB,UAAU,YAAY;AAAA,QAC3C;AAAA,MACA,CAAC;AACD,aAAO,SAAS,KAAK;AAAA,IACzB,SAAS,OAAO;AAEZ,aAAO;AAAA,IACX;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAY,aAAqB;AACnC,UAAM,MAAe,GAAG,KAAK,OAAO;AACpC,UAAM,WAA2B,MAAM,MAAM,IAAI,KAAK;AAAA,MAClD,SAAS;AAAA,QACL,iBAAiB,UAAU,WAAW;AAAA,MAC1C;AAAA,IACJ,CAAC;AACD,QAAI,SAAS,WAAW,KAAK;AACzB,aAAO,SAAS;AAAA,IACpB;AACA,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAgB,cAAc,OAAiC;AAC3D,QAAI;AACA,cAAQ,IAAI,gBAAgB,KAAK;AAEjC,UAAI,CAAC,OAAO;AACR,eAAO;AAAA,MACX;AACA,YAAM,MAAe,GAAG,KAAK,OAAO;AACpC,YAAM,WAA2B,MAAM,MAAM,IAAI,KAAK;AAAA,QAClD,SAAS;AAAA,UACL,iBAAiB,UAAU,KAAK;AAAA,QACpC;AAAA,MACJ,CAAC;AACD,aAAO,SAAS,WAAW;AAAA,IAC/B,SAAS,OAAO;AAEZ,UAAI,iBAAiB,cAAc,MAAM,UAAU,WAAW,KAAK;AAC/D,eAAO;AAAA,MACX,OAAO;AACH,cAAM;AAAA,MACV;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMO,cAAmC;AACtC,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAgB,eAAe,aAAwC;AACnE,UAAM,WAA2B,MAAM,MAAM,KAAK,GAAG,KAAK,OAAO,yBAAyB,CAAC,GAAG;AAAA,MAC1F,SAAS;AAAA,QACL,iBAAiB,UAAU,WAAW;AAAA,MAC1C;AAAA,IACJ,CAAC;AACD,WAAO,SAAS;AAAA,EACpB;AACJ;AAEA,IAAO,yBAAQ;;;AE/Jf,SAAqB,cAAc;AAQnC,SAAS,eAAe,KAAe,aAAqB;AAExD,QAAM,eAAe,OAAO,WAAW;AAKvC,MAAI,CAAC,aAAa,KAAK;AACnB,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACtE;AAEA,MAAI,OAAO,eAAe,aAAa;AAAA,IACnC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,IAAI,QAAQ;AAAA,IAC1D,UAAU;AAAA,IACV,QAAS,aAAa,MAAM,MAAQ,KAAK,IAAI;AAAA,EACjD,CAAC;AACL;AAOA,SAAS,gBAAgB,KAAe,cAAsB;AAE1D,QAAM,eAAe,OAAO,YAAY;AAExC,MAAI,CAAC,aAAa,KAAK;AACnB,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACvE;AAEA,MAAI,OAAO,gBAAgB,cAAc;AAAA,IACrC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,IAAI,QAAQ;AAAA,IAC1D,UAAU;AAAA,IACV,QAAS,aAAa,MAAM,MAAQ,KAAK,IAAI;AAAA,EACjD,CAAC;AACL;AAEA,SAAS,aAAa,KAA0C;AAC5D,QAAM,UAAU,IAAI,QAAQ;AAC5B,MAAI,CAAC,SAAS;AACV,WAAO,CAAC;AAAA,EACZ;AACA,SAAO,QAAQ,MAAM,GAAG,EAAE,OAAO,CAAC,KAAgC,WAAW;AACzE,UAAM,CAAC,KAAK,KAAK,IAAI,OAAO,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC;AACxD,QAAI,GAAG,IAAI;AACX,WAAO;AAAA,EACX,GAAG,CAAC,CAAC;AACT;AAEA,SAAS,aAAa,KAAe;AACjC,MAAI,YAAY,eAAe;AAAA,IAC3B,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,IAAI,QAAQ;AAAA,IAC1D,UAAU;AAAA,IACV,MAAM;AAAA,EACV,CAAC;AACD,MAAI,YAAY,gBAAgB;AAAA,IAC5B,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ,IAAI,QAAQ;AAAA,IAC1D,UAAU;AAAA,IACV,MAAM;AAAA,EACV,CAAC;AACL;;;ACrEA,SAAS,cAAAA,mBAAkB;AAC3B,OAAOC,YAAW;AAelB,IAAM,0BAAN,cAAsC,uBAAe;AAAA,EAEjD,YACIC,SACF;AACE,UAAMA,OAAM;AAGZ,SAAK,cAAc,KAAK,YAAY,KAAK,IAAI;AAC7C,SAAK,iBAAiB,KAAK,eAAe,KAAK,IAAI;AACnD,SAAK,QAAQ,KAAK,MAAM,KAAK,IAAI;AACjC,SAAK,SAAS,KAAK,OAAO,KAAK,IAAI;AACnC,SAAK,UAAU,KAAK,QAAQ,KAAK,IAAI;AACrC,SAAK,aAAa,KAAK,WAAW,KAAK,IAAI;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAa,YAAY,KAAc,KAAe,MAAmC;AACrF,UAAM,UAAU,aAAa,GAAG;AAEhC,YAAQ,IAAI,kBAAkB,OAAO;AACrC,QAAI;AACA,YAAM,qBAA+B,MAAM,KAAK,cAAc,SAAS,WAAW;AAClF,UAAI,CAAC,oBAAoB;AAErB,cAAM,iBAAiC,MAAM,KAAK,aAAa,SAAS,YAAY;AACpF,YAAI,gBAAgB;AAChB,yBAAe,KAAK,cAAc;AAClC,cAAI,SAAS,IAAI,WAAW;AAAA,QAChC,OACK;AAED,gBAAM,cAAmC,IAAI;AAC7C,cAAI,SAAS,GAAG,KAAK,QAAQ,iBAAiB,KAAK,OAAO,aAAa,GAAG,KAAK,OAAO,WAAW,kBAAkB,WAAW,EAAE;AAAA,QACpI;AAAA,MACJ,OACK;AAED,aAAK;AAAA,MACT;AAAA,IACJ,SAAS,OAAO;AAEZ,UAAI,iBAAiBC,aAAY;AAC7B,YAAI,OAAQ,MAAqB,UAAU,UAAU,GAAG,EAAE,KAAM,MAAqB,UAAU,QAAQ,uBAAuB;AAAA,MAClI,OAAO;AACH,YAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,MAChD;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,QAAQ,KAAc,KAA8B;AAC7D,UAAM,UAAU,aAAa,GAAG;AAChC,UAAM,cAAc,SAAS;AAC7B,QAAI,CAAC,aAAa;AACd,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC9D;AACA,UAAM,WAAW,MAAM,KAAK,YAAY,WAAW;AACnD,QAAI,OAAO,GAAG,EAAE,KAAK,QAAQ;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAa,eACT,KACA,KACA,MACa;AACb,QAAI;AACA,YAAM,WAA+B,IAAI,MAAM;AAC/C,YAAM,cAAmC,IAAI,MAAM;AACnD,UAAI,CAAC,UAAU;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAClE;AAEA,YAAM,SAAiB,MAAM,KAAK,UAAU,QAAQ;AAGpD,qBAAe,KAAK,OAAO,WAAW;AACtC,sBAAgB,KAAK,OAAO,YAAY;AAExC,UAAI,aAAa;AAEb,YAAI,SAAS,WAAW;AAAA,MAC5B,OACK;AAED,YAAI,SAAS,GAAG;AAAA,MACpB;AAAA,IACJ,SAAS,OAAO;AAEZ,UAAI,iBAAiBA,aAAY;AAC7B,YAAI,OAAQ,MAAqB,UAAU,UAAU,GAAG,EAAE,KAAM,MAAqB,UAAU,QAAQ,uBAAuB;AAC9H,gBAAQ,MAAM,gBAAgB,KAAK;AAAA,MACvC,OAAO;AACH,YAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAC5C,gBAAQ,MAAM,gBAAgB,KAAK;AAAA,MACvC;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,MAAM,KAAc,KAAqB;AAC5C,QAAI;AACA,UAAI,CAAC,KAAK,UAAU;AAChB,cAAM,IAAI,MAAM,oFAAoF;AAAA,MACxG;AACA,UAAI,SAAS,KAAK,WAAW,iBAAiB,KAAK,OAAO,aAAa,GAAG,KAAK,OAAO,WAAW,EAAE;AAAA,IACvG,SAAS,OAAO;AACZ,cAAQ,MAAM,8BAA8B,KAAK;AACjD,UAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,IAChD;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,OAAO,KAAc,KAAqB;AAC7C,UAAM,UAAU,aAAa,GAAG;AAChC,QAAI;AACA,UAAI,CAAC,KAAK,WAAW;AACjB,cAAM,IAAI,MAAM,qFAAqF;AAAA,MACzG;AACA,UAAI,SAAS,aAAa;AACtB,QAAAC,OAAM,KAAK,KAAK,WAAW,CAAC,GAAG;AAAA;AAAA,UAC3B,SAAS;AAAA,YACL,iBAAiB,UAAU,SAAS,WAAW;AAAA,UACnD;AAAA,QACJ,CAAC;AAAA,MACL;AACA,mBAAa,GAAG;AAChB,UAAI,SAAS,GAAG;AAAA,IACpB,SAAS,OAAO;AACZ,cAAQ,MAAM,+BAA+B,KAAK;AAClD,UAAI,OAAO,GAAG,EAAE,KAAK,uBAAuB;AAAA,IAChD;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUO,WAAW,KAAc,KAAe;AAC3C,UAAM,UAAU,aAAa,GAAG;AAChC,SAAK,OAAO,KAAK,GAAG;AACpB,SAAK,eAAe,SAAS,WAAW;AAAA,EAC5C;AACJ;AAEA,IAAO,kCAAQ;",
+  "names": ["AxiosError", "axios", "config", "AxiosError", "axios"]
+}

package/dist/types/src/config.d.ts

@@ -0,0 +1,5 @@
+export type AuthGneissGeneralConfig = {
+    authUrl: string;
+};
+export declare const config: AuthGneissGeneralConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/types/src/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/config.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,eAAO,MAAM,MAAM,EAAG,uBAGrB,CAAA"}

package/dist/types/src/core/AuthGneissCore.d.ts

@@ -0,0 +1,53 @@
+import { AuthGneissCoreConfig } from "@core/types";
+import { Tokens } from "@core/types";
+import { AuthGneissGeneralConfig } from "@/config";
+/**
+ * AuthGneissCore provides core functionality for OAuth2 authentication flow with Gneiss authentication service.
+ * It handles token exchange, token refresh, user data fetching, and token validation.
+ *
+ * This class serves as a base class that can be extended by framework-specific implementations
+ * to provide authentication middleware and handlers.
+ */
+declare class AuthGneissCore {
+    protected config: AuthGneissCoreConfig & AuthGneissGeneralConfig;
+    protected authUrl: string | undefined;
+    protected loginUrl: string | undefined;
+    protected logoutUrl: string | undefined;
+    constructor(devConfig: AuthGneissCoreConfig);
+    /**
+     * getTokens is a method that exchanges an authentication code for access and refresh tokens.
+     * The client id and secret are passed as basic auth headers to authenticate the client itself.
+     * @param authCode - The authentication code received from the Gneiss authentication service.
+     * @returns A promise that resolves to an object containing the access and refresh tokens.
+     */
+    protected getTokens(authCode: string): Promise<Tokens>;
+    /**
+     * refreshToken is a method that refreshes the access token using the refresh token.
+     * @param refreshToken - The refresh token to be used for token refresh.
+     * @returns A promise that resolves to the refreshed access token.
+     */
+    protected refreshToken(refreshToken: string): Promise<string | null>;
+    /**
+     * getUserData is a method that fetches user data using the access token.
+     * @param accessToken - The access token to be used for user data fetching.
+     * @returns A promise that resolves to the user data.
+     */
+    getUserData(accessToken: string): Promise<any>;
+    /**
+     * validateToken is a method that validates the access token.
+     * @param token - The access token to be validated.
+     * @returns A promise that resolves to a boolean indicating the validity of the token.
+     */
+    protected validateToken(token: string): Promise<boolean>;
+    /**
+     * getLoginUrl is a method that returns the login URL.
+     * @returns The login URL.
+     */
+    getLoginUrl(): string | undefined;
+    /**
+     * deleteUser deletes the user
+     * */
+    protected deleteUserData(accessToken: string): Promise<object>;
+}
+export default AuthGneissCore;
+//# sourceMappingURL=AuthGneissCore.d.ts.map

package/dist/types/src/core/AuthGneissCore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthGneissCore.d.ts","sourceRoot":"","sources":["../../../../src/core/AuthGneissCore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAIrC,OAAO,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAOnD;;;;;;GAMG;AACH,cAAM,cAAc;IAChB,SAAS,CAAC,MAAM,EAAE,oBAAoB,GAAG,uBAAuB,CAAC;IACjE,SAAS,CAAC,OAAO,EAAG,MAAM,GAAG,SAAS,CAAA;IACtC,SAAS,CAAC,QAAQ,EAAG,MAAM,GAAG,SAAS,CAAA;IACvC,SAAS,CAAC,SAAS,EAAG,MAAM,GAAG,SAAS,CAAA;gBAGpC,SAAS,EAAE,oBAAoB;IAiBnC;;;;;OAKG;cACa,SAAS,CAAC,QAAQ,EAAG,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC;IAsB9D;;;;OAIG;cACa,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAe1E;;;;OAIG;IACG,WAAW,CAAC,WAAW,EAAE,MAAM;IAarC;;;;OAIG;cACa,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwB9D;;;OAGG;IACI,WAAW,IAAK,MAAM,GAAG,SAAS;IAIzC;;SAEK;cACW,cAAc,CAAC,WAAW,EAAG,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC;CAQzE;AAED,eAAe,cAAc,CAAC"}

package/dist/types/src/core/index.d.ts

@@ -0,0 +1,5 @@
+import AuthGneissCore from "./AuthGneissCore";
+import { AuthGneissCoreConfig } from "./types";
+export { AuthGneissCore };
+export type { AuthGneissCoreConfig };
+//# sourceMappingURL=index.d.ts.map

package/dist/types/src/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/index.ts"],"names":[],"mappings":"AAAA,OAAO,cAAc,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAE/C,OAAO,EAAE,cAAc,EAAC,CAAC;AACzB,YAAY,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/types/src/core/types.d.ts

@@ -0,0 +1,20 @@
+import { Request } from "express";
+interface AuthGneissCoreConfig {
+    clientId: string;
+    clientSecret: string;
+    baseClientUrl: string;
+    callbackUrl: string;
+}
+interface Tokens {
+    accessToken: string;
+    refreshToken: string;
+    tokenType: string;
+}
+interface RequestWithTokens extends Request {
+    cookies: {
+        accessToken: string;
+        refreshToken: string;
+    };
+}
+export { AuthGneissCoreConfig, Tokens, RequestWithTokens };
+//# sourceMappingURL=types.d.ts.map

package/dist/types/src/core/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,UAAU,oBAAoB;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACvB;AAED,UAAU,MAAM;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,iBAAkB,SAAQ,OAAO;IACvC,OAAO,EAAE;QACL,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;KACxB,CAAA;CACJ;AAED,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/types/src/frameworks/express/middleware/ExpressAuthGneissClient.d.ts

@@ -0,0 +1,64 @@
+import { AuthGneissCore, AuthGneissCoreConfig } from "@core";
+import { Request, Response, NextFunction } from "express";
+/**
+ * ExpressAuthGneissClient extends AuthGneissCore to provide Express-specific authentication middleware
+ * and functionality for handling OAuth2 authentication flow with Gneiss authentication service.
+ *
+ * @extends AuthGneissCore
+ * @example
+ * const authClient = new ExpressAuthGneissClient({
+ *   clientId: 'your-client-id',
+ *   clientSecret: 'your-client-secret',
+ *   redirectUrl: 'your-redirect-url'
+ * });
+ */
+declare class ExpressAuthGneissClient extends AuthGneissCore {
+    constructor(config: AuthGneissCoreConfig);
+    /**
+     * requireAuth is a middleware function that checks if the access token is valid.
+     * If the access token is not valid, it attempts to refresh the token using the refresh token.
+     * If the refresh token is not valid, it redirects the user to the login page.
+     * @param req - The request object.
+     * @param res - The response object.
+     * @param next - The next middleware function.
+     */
+    requireAuth(req: Request, res: Response, next: NextFunction): Promise<void>;
+    /**
+     * getUserData is a middleware function that fetches user data using the access token.
+     * @param req - The request object.
+     * @param res - The response object.
+     * @param next - The next middleware function.
+     */
+    getUser(req: Request, res: Response): Promise<void>;
+    /**
+     * handleCallBack is a middleware function that handles the callback from the authentication service.
+     * It extracts the auth code from the request URL parameters, exchanges it for tokens, and sets the access and refresh tokens in the response cookies.
+     * @param req - The request object.
+     * @param res - The response object.
+     * @param next - The next middleware function.
+     */
+    handleCallBack(req: Request, res: Response, next: NextFunction): Promise<void>;
+    /**
+     * login is a function that redirects the user to the Gneiss authentication service for authentication.
+     * @param req - The request object.
+     * @param res - The response object.
+     */
+    login(req: Request, res: Response): void;
+    /**
+     * logout is a function that redirects the user to the Gneiss logout service.
+     * @param req - The request object.
+     * @param res - The response object.
+     */
+    logout(req: Request, res: Response): void;
+    /**
+     * Utility route handler for deleting a user
+     * This ensures that the user is fully logged out before
+     * deleting the user's data
+     *
+     * @param req - The request object.
+     * @param res - The response object.
+     */
+    deleteUser(req: Request, res: Response): void;
+}
+export default ExpressAuthGneissClient;
+//# sourceMappingURL=ExpressAuthGneissClient.d.ts.map

package/dist/types/src/frameworks/express/middleware/ExpressAuthGneissClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExpressAuthGneissClient.d.ts","sourceRoot":"","sources":["../../../../../../src/frameworks/express/middleware/ExpressAuthGneissClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAQ1D;;;;;;;;;;;GAWG;AACH,cAAM,uBAAwB,SAAQ,cAAc;gBAG5C,MAAM,EAAE,oBAAoB;IAahC;;;;;;;OAOG;IACU,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAiCxF;;;;;OAKG;IACU,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAUhE;;;;;;OAMG;IACU,cAAc,CACvB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACnB,OAAO,CAAC,IAAI,CAAC;IAkChB;;;;OAIG;IACI,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,IAAI;IAY/C;;;;OAIG;IACI,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,IAAI;IAqBhD;;;;;;;OAOG;IACI,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ;CAKhD;AAED,eAAe,uBAAuB,CAAC"}

package/dist/types/src/frameworks/index.d.ts

@@ -0,0 +1,3 @@
+import ExpressAuthGneissClient from "./express/middleware/ExpressAuthGneissClient";
+export { ExpressAuthGneissClient };
+//# sourceMappingURL=index.d.ts.map

package/dist/types/src/frameworks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/frameworks/index.ts"],"names":[],"mappings":"AAAA,OAAO,uBAAuB,MAAM,8CAA8C,CAAC;AAEnF,OAAO,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/types/src/index.d.ts

@@ -0,0 +1,5 @@
+export { ExpressAuthGneissClient } from "./frameworks";
+export { AuthGneissCore } from "./core";
+export { parseCookies } from "@utils";
+export type { AuthGneissCoreConfig } from "./core";
+//# sourceMappingURL=index.d.ts.map

package/dist/types/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAA;AACrC,YAAY,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC"}

package/dist/types/src/utils/index.d.ts

@@ -0,0 +1,2 @@
+export { setAccessToken, setRefreshToken, parseCookies } from "@utils/storage/cookieHandling";
+//# sourceMappingURL=index.d.ts.map

package/dist/types/src/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC"}

package/dist/types/src/utils/storage/cookieHandling.d.ts

@@ -0,0 +1,20 @@
+import { Response } from "express";
+import { Request } from "express";
+/**
+ * Set the access token in the response cookies.
+ * @param res - The response object.
+ * @param accessToken - The access token to set.
+ */
+declare function setAccessToken(res: Response, accessToken: string): void;
+/**
+ * Set the refresh token in the response cookies.
+ * @param res - The response object.
+ * @param refreshToken - The refresh token to set.
+ */
+declare function setRefreshToken(res: Response, refreshToken: string): void;
+declare function parseCookies(req: Request): {
+    [key: string]: string;
+};
+declare function clearCookies(res: Response): void;
+export { setAccessToken, setRefreshToken, parseCookies, clearCookies };
+//# sourceMappingURL=cookieHandling.d.ts.map

package/dist/types/src/utils/storage/cookieHandling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookieHandling.d.ts","sourceRoot":"","sources":["../../../../../src/utils/storage/cookieHandling.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC;;;;GAIG;AACH,iBAAS,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,QAiBzD;AAED;;;;GAIG;AACH,iBAAS,eAAe,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,QAc3D;AAED,iBAAS,YAAY,CAAC,GAAG,EAAE,OAAO,GAAI;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,CAU9D;AAED,iBAAS,YAAY,CAAC,GAAG,EAAE,QAAQ,QAalC;AAED,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC"}

package/dist/types/tests/frameworks/express/middleware/ExpressAuthGneissClient.integration.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ExpressAuthGneissClient.integration.test.d.ts.map

package/dist/types/tests/frameworks/express/middleware/ExpressAuthGneissClient.integration.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExpressAuthGneissClient.integration.test.d.ts","sourceRoot":"","sources":["../../../../../../tests/frameworks/express/middleware/ExpressAuthGneissClient.integration.test.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gneiss/client-auth",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",
   "types": "dist/types/src/index.d.ts",